Route Origin Authorization
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
File: 3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa (raw, json)
Hash identifier: p0j+mCH5u6PyKkXtQD05XppdRH8jOAH65jI3rvaJ80c=
Subject key identifier: 95:4E:24:2B:A3:7E:59:FD:3E:F6:7E:96:65:A0:68:C7:86:E6:33:D5
Certificate issuer: /CN=CF5339F87B278717067560B9059C3098661F754B
Certificate serial: 027AF41EE160CF184F026EDC61673B2902A7766B
Authority key identifier: CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject info access: rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
Signing time: Tue 04 Feb 2025 18:23:19 +0000
ROA not before: Tue 04 Feb 2025 18:18:19 +0000
ROA not after: Tue 03 Feb 2026 18:23:19 +0000
asID: 265762
IP address blocks: 128.201.162.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
02:7a:f4:1e:e1:60:cf:18:4f:02:6e:dc:61:67:3b:29:02:a7:76:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=CF5339F87B278717067560B9059C3098661F754B
Validity
Not Before: Feb 4 18:18:19 2025 GMT
Not After : Feb 3 18:23:19 2026 GMT
Subject: CN=954E242BA37E59FD3EF67E9665A068C786E633D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:26:ee:a5:76:d4:fb:c2:5e:76:70:fd:f2:c2:
6d:c8:41:98:9c:ec:f9:d1:a8:d6:a5:7e:3d:70:76:
2f:71:cb:5b:53:d2:2f:27:0f:19:bd:2f:39:72:b0:
f4:c0:fb:1e:79:18:43:65:17:db:bc:2c:d2:b6:05:
e1:5f:4f:7a:75:0e:b6:41:7a:7e:79:7c:96:ff:0d:
9c:08:d5:79:d1:d5:b3:d8:d8:e7:5a:40:cb:64:7e:
c0:f0:45:7f:fd:29:4a:9d:88:4a:cd:24:8f:3d:e1:
db:a3:be:bd:68:7f:9d:c8:a8:2f:3d:97:95:51:f5:
87:29:f2:db:79:46:47:7a:a4:f0:7c:72:8b:72:fe:
14:8b:97:c8:25:72:74:1e:38:4b:51:32:2f:9f:3e:
50:75:be:d1:da:da:c6:f6:57:53:6d:f3:8c:06:ff:
f6:5a:16:73:32:6c:3f:97:13:41:e6:13:9e:a7:96:
af:24:5b:3f:99:19:fe:f6:82:85:9b:6f:da:04:07:
35:95:e3:3b:76:59:c5:b8:b4:a3:e4:34:cd:33:71:
15:1b:60:82:8a:15:5e:2c:15:8e:55:99:aa:e6:d9:
a8:5b:db:0a:53:9f:4c:a7:d6:e4:33:fb:96:90:1f:
75:4f:b1:1e:15:b8:a8:c5:9a:f8:38:be:9a:26:f7:
86:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:4E:24:2B:A3:7E:59:FD:3E:F6:7E:96:65:A0:68:C7:86:E6:33:D5
X509v3 Authority Key Identifier:
keyid:CF:53:39:F8:7B:27:87:17:06:75:60:B9:05:9C:30:98:66:1F:75:4B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/CF5339F87B278717067560B9059C3098661F754B.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/CF5339F87B278717067560B9059C3098661F754B.cer
Subject Information Access:
Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/38D53F21DBB0C6D941D346978CD73AA33B02A79E32543773A79EA6AB8BD48D08/0/3132382e3230312e3136322e302f32342d3234203d3e20323635373632.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
128.201.162.0/24
Signature Algorithm: sha256WithRSAEncryption
23:01:04:a3:6e:65:4f:4e:f6:e4:ad:95:25:bc:19:85:34:54:
c9:ee:6c:7a:be:d8:72:5d:ed:6d:97:61:3f:19:db:11:83:19:
f4:63:64:57:e1:67:e0:c4:db:c6:b7:f4:45:64:69:3c:4c:e6:
0e:0b:5c:d2:3d:84:0f:dc:4b:a3:53:5a:30:f9:0f:f0:07:42:
ef:f7:1e:76:2b:51:85:b2:cd:83:b0:b0:b0:49:ec:e9:46:79:
57:11:97:a9:dd:a3:98:60:81:df:50:c9:3b:ac:5c:53:36:a8:
08:28:7c:df:ef:97:a4:d6:5f:3b:f2:c5:69:c5:53:99:f3:74:
22:5f:ee:de:00:1b:42:c4:80:59:19:43:0f:36:3c:67:02:8d:
88:f3:03:1b:35:16:33:5d:64:b7:3a:1a:99:99:1e:ec:5b:1f:
92:84:76:04:66:6e:9f:fd:ba:43:89:26:c9:0e:72:19:41:e5:
e5:00:10:95:07:f9:57:6f:cb:ec:ad:b4:d4:8b:3f:ba:97:d0:
c0:94:50:58:55:3c:0f:39:4e:1b:97:39:11:59:47:f4:4c:30:
76:34:4e:5e:cf:72:fa:f0:e5:aa:b0:ab:0d:19:b4:f5:34:5c:
56:e8:f5:bd:1b:93:8a:79:40:e2:bb:63:f4:c2:25:1b:6e:bb:
c3:c8:17:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 14:02:19 2025 by rpki-client